ok drahn@

stats' and 'rndc recursing' commands in /var/named/tmp (instead of
/var/named), which is writable by the 'named' user.
feedback and ok jakob@ deraadt@, also agreed by fkr@ and msf@

ok krw@

ok miod@, deraadt@

with deraadt@ some time ago

ok drahn@

ok henning@ deraadt@

/etc/isamkpd.  Noticed by ajacoutot@lphp.org, thanks!
ok mcbride

This makes it readable by unprivileged uses, simplifying configuration,
and there is no reason for it to be secret.
ok msf deraadt hshoexer

rc checks pflog0 existance before starting pflogd0, pbly to not print an
error message on pflog-less kernels... ugh. ok mcbride

and deleted. previously this script only generated diffs for existing
files.
ok lots of people including millert@ msf@ mcbride@ todd@ and probably more.

ok claudio@

(output logs are still umask 077)
"i think this is right" deraadt@

ok claudio@

Encountered by henning@; ok millert@ robert@ deraadt@

Unfortunately this does not fix existing file permissions.
Spotted by Antti Harri <iku at openbsd dot fi>.
OK millert@.

sector forwarding on those ide/esdi disks.

OK deraadt@, henning@, mcbride@

ok beck@

ok miod

If a user is running sasyncd, start isakmpd with -S.
In this mode isakmpd starts off passsive and doesn't
delete SA's on shutdown.
OK ho@, hshoexer@, deraadt@

you do not want a machine that is in the middle of rc and does not have
all network daemons (that possibly increase the carp demotion counter
further) to become master just because the other one lost 2 bgp sessions
or similar for other daemons (esp sasyncd) and as such has a demotion
count of >1.
ok mcbride mpf deraadt

sparc.
ok miod@